QoS with PPPoE

fabert · Thu Sep 11, 2008 3:54 pm

Hi all,
I'm having troubles setting up QoS in a network with users connected by PPPoE authentication. I tried to set up QoS with simple queues because queue trees don't work as expected ( due to the presence of dynamic PPPoE queues).
All seems to work well for download bandwidth limits, but not so well for upload speed.
The upload guaranteed bandwidth for the different types of traffic (identified by packet marks) is not assured; the upload bandwidth seems to be shared equally among traffic types and so the “limit-at” parameter is not observed.

Below is showed my configuration:

/ip firewall mangle:

31   ;;; ### http - web
      chain=prerouting action=mark-connection new-connection-mark=http_conn passthrough=yes 
      src-address-list=pppoe layer7-protocol=http 

32   ;;; ### http - altro traffico sulla porta 80
      chain=prerouting action=mark-connection new-connection-mark=http_conn passthrough=yes 
      src-address-list=pppoe dst-port=80 protocol=tcp 

33   chain=prerouting action=mark-connection new-connection-mark=http_conn passthrough=yes 
      src-address-list=pppoe src-port=80 protocol=tcp 

34   chain=prerouting action=mark-packet new-packet-mark=http_pack passthrough=yes connection-mark=http_conn 

35   chain=prerouting action=mark-routing new-routing-mark=telecom passthrough=no 
      src-address-list=pppoe dst-address-list=!management connection-mark=http_conn 

36   ;;; ### Other Traffic
      chain=prerouting action=mark-connection new-connection-mark=other_conn passthrough=yes 
      src-address-list=pppoe 

37   chain=prerouting action=mark-packet new-packet-mark=other_pack passthrough=yes 
      connection-mark=other_conn 

38   chain=prerouting action=mark-routing new-routing-mark=telecom passthrough=no src-address-list=pppoe 
      dst-address-list=!management connection-mark=other_conn

/queue simple:

1    name="upload" dst-address=0.0.0.0/0 interface=Telecom parent=none direction=download priority=8 
queue=default-small/default-small limit-at=0/128000 max-limit=0/128000 burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small 

2    name="http_up" dst-address=0.0.0.0/0 interface=all parent=upload packet-marks=http_pack direction=download
priority=8 queue=default-small/default-small limit-at=400000/28000 max-limit=512000/128000 burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small 

3    name="other_up" dst-address=0.0.0.0/0 interface=all parent=upload packet-marks=other_pack 
direction=download    priority=8 queue=default-small/default-small limit-at=112000/100000 max-limit=512000/128000 burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

thanks in advance

rafa_lore · Thu Sep 11, 2008 4:28 pm

Hello
Look iin MKT wiki, there is a way to do what you are looking
Rafael Lore

fabert · Thu Sep 11, 2008 4:37 pm

Hi rafa_lore,

I've been looking for a solution to my problem in mkt wiki and forum
but I can't find it.
I started to implement QoS with queue tree but I understood that the right way is simple queue, when pppoe is running.

can you help me more?

Thanks a lot

Ozelo · Fri Sep 12, 2008 1:47 pm

While using pppoe server, you should consider using PCQ, global-in and global-out, but no simple queues. Here is a example I made for congested wireless AP:

# Queue types
/queue type set default kind=pfifo name="default" pfifo-limit=60
/queue type set ethernet-default kind=pfifo name="ethernet-default" pfifo-limit=60
/queue type set wireless-default kind=sfq name="wireless-default" sfq-allot=1514 sfq-perturb=5
/queue type add kind=pcq name="up_classA" pcq-classifier=src-address pcq-limit=60 pcq-rate=600000 pcq-total-limit=2000
/queue type add kind=pcq name="dn_classA" pcq-classifier=dst-address pcq-limit=60 pcq-rate=600000 pcq-total-limit=2000
/queue type add kind=pcq name="up_classB" pcq-classifier=src-address pcq-limit=60 pcq-rate=300000 pcq-total-limit=3000
/queue type add kind=pcq name="up_classC" pcq-classifier=src-address pcq-limit=60 pcq-rate=150000 pcq-total-limit=5000
/queue type add kind=pcq name="dn_classB" pcq-classifier=dst-address pcq-limit=60 pcq-rate=300000 pcq-total-limit=3000
/queue type add kind=pcq name="dn_classC" pcq-classifier=dst-address pcq-limit=60 pcq-rate=150000 pcq-total-limit=5000
/queue type add kind=pcq name="dn_classA_burst" pcq-classifier=dst-address pcq-limit=60 pcq-rate=2000000 pcq-total-limit=2000
/queue type add kind=pcq name="dn_classB_burst" pcq-classifier=dst-address pcq-limit=60 pcq-rate=1000000 pcq-total-limit=3000
/queue type add kind=pcq name="dn_classC_burst" pcq-classifier=dst-address pcq-limit=60 pcq-rate=500000 pcq-total-limit=5000
/queue type add kind=pcq name="dn_classA_tar" pcq-classifier=dst-address pcq-limit=500 pcq-rate=64000 pcq-total-limit=20000
/queue type add kind=pcq name="dn_classB_tar" pcq-classifier=dst-address pcq-limit=500 pcq-rate=32000 pcq-total-limit=30000
/queue type add kind=pcq name="dn_classC_tar" pcq-classifier=dst-address pcq-limit=500 pcq-rate=16000 pcq-total-limit=50000
/queue type add kind=pcq name="up_classA_tar" pcq-classifier=src-address pcq-limit=500 pcq-rate=64000 pcq-total-limit=20000
/queue type add kind=pcq name="up_classB_tar" pcq-classifier=src-address pcq-limit=500 pcq-rate=32000 pcq-total-limit=30000
/queue type add kind=pcq name="up_classC_tar" pcq-classifier=src-address pcq-limit=500 pcq-rate=16000 pcq-total-limit=50000
#
# Queue tree
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=3000000 max-limit=3000000 name="downstream" packet-mark="" parent=global-out priority=8 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=1000000 max-limit=1000000 name="upstream" packet-mark="" parent=global-in priority=8 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=600000 max-limit=1200000 name="dnstrm_classA_ensign" packet-mark=dnstrm_classA_ensign parent=downstream priority=2 queue=dn_classA
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=3000000 max-limit=3000000 name="dnstrm_icmp" packet-mark=dnstrm_icmp parent=downstream priority=1 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=2000000 max-limit=3000000 name="dnstrm_classA_burst" packet-mark=dnstrm_classA_burst parent=downstream priority=3 queue=dn_classA_burst
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=600000 max-limit=1200000 name="dnstrm_classA_foreign" packet-mark=dnstrm_classA_foreign parent=downstream priority=7 queue=dn_classA
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10000 max-limit=1200000 name="dnstrm_classA_p2p" packet-mark=dnstrm_classA_p2p parent=downstream priority=8 queue=dn_classA
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=1000000 max-limit=1000000 name="upstrm_icmp" packet-mark=upstrm_icmp parent=upstream priority=1 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=600000 max-limit=1200000 name="dnstrm_classA_aftrb" packet-mark=dnstrm_classA_aftrb parent=downstream priority=4 queue=dn_classA
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=300000 max-limit=900000 name="dnstrm_classB_ensign" packet-mark=dnstrm_classB_ensign parent=downstream priority=2 queue=dn_classB
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=150000 max-limit=450000 name="dnstrm_classC_ensign" packet-mark=dnstrm_classC_ensign parent=downstream priority=2 queue=dn_classC
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=1000000 max-limit=3000000 name="dnstrm_classB_burst" packet-mark=dnstrm_classB_burst parent=downstream priority=4 queue=dn_classB_burst
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=500000 max-limit=1500000 name="dnstrm_classC_burst" packet-mark=dnstrm_classC_burst parent=downstream priority=5 queue=dn_classC_burst
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=300000 max-limit=600000 name="dnstrm_classB_aftrb" packet-mark=dnstrm_classB_aftrb parent=downstream priority=5 queue=dn_classB
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=150000 max-limit=450000 name="dnstrm_classC_aftrb" packet-mark=dnstrm_classC_aftrb parent=downstream priority=6 queue=dn_classC
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10000 max-limit=900000 name="dnstrm_classB_p2p" packet-mark=dnstrm_classB_p2p parent=downstream priority=8 queue=dn_classB
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10000 max-limit=450000 name="dnstrm_classC_p2p" packet-mark=dnstrm_classC_p2p parent=downstream priority=8 queue=dn_classC
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=150000 max-limit=450000 name="dnstrm_classC_foreign" packet-mark=dnstrm_classC_foreign parent=downstream priority=7 queue=dn_classC
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=300000 max-limit=900000 name="dnstrm_classB_foreign" packet-mark=dnstrm_classB_foreign parent=downstream priority=7 queue=dn_classB
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=600000 max-limit=1000000 name="upstrm_classA_ensign" packet-mark=upstrm_classA_ensign parent=upstream priority=2 queue=up_classA
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=300000 max-limit=600000 name="upstrm_classB_ensign" packet-mark=upstrm_classB_ensign parent=upstream priority=2 queue=up_classB
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=150000 max-limit=300000 name="upstrm_classC_ensign" packet-mark=upstrm_classC_ensign parent=upstream priority=2 queue=up_classC
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10000 max-limit=1000000 name="upstrm_classA_p2p" packet-mark=upstrm_classA_p2p parent=upstream priority=8 queue=up_classA
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10000 max-limit=600000 name="upstrm_classB_p2p" packet-mark=upstrm_classB_p2p parent=upstream priority=8 queue=up_classB
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10000 max-limit=300000 name="upstrm_classC_p2p" packet-mark=upstrm_classC_p2p parent=upstream priority=8 queue=up_classC
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=150000 max-limit=300000 name="upstrm_classC_foreign" packet-mark=upstrm_classC_foreign parent=upstream priority=7 queue=up_classC
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=300000 max-limit=600000 name="upstrm_classB_foreign" packet-mark=upstrm_classB_foreign parent=upstream priority=7 queue=up_classB
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=600000 max-limit=1000000 name="upstrm_classA_foreign" packet-mark=upstrm_classA_foreign parent=upstream priority=7 queue=up_classA
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=600000 max-limit=1000000 name="upstrm_classA_while" packet-mark=upstrm_classA_while parent=upstream priority=4 queue=up_classA
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=300000 max-limit=600000 name="upstrm_classB_while" packet-mark=upstrm_classB_while parent=upstream priority=5 queue=up_classB
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=150000 max-limit=300000 name="upstrm_classC_while" packet-mark=upstrm_classC_while parent=upstream priority=6 queue=up_classC
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10000 max-limit=1200000 name="dnstrm_classA_tar" packet-mark=dnstrm_classA_tar parent=downstream priority=8 queue=dn_classA_tar
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10000 max-limit=900000 name="dnstrm_classB_tar" packet-mark=dnstrm_classB_tar parent=downstream priority=8 queue=dn_classB_tar
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10000 max-limit=450000 name="dnstrm_classC_tar" packet-mark=dnstrm_classC_tar parent=downstream priority=8 queue=dn_classC_tar
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10000 max-limit=1000000 name="upstrm_classA_tar" packet-mark=upstrm_classA_tar parent=upstream priority=8 queue=up_classA_tar
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10000 max-limit=600000 name="upstrm_classB_tar" packet-mark=upstrm_classB_tar parent=upstream priority=8 queue=up_classB_tar
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=10000 max-limit=300000 name="upstrm_classC_tar" packet-mark=upstrm_classC_tar parent=upstream priority=8 queue=up_classC_tar
#
# IP firewall mangle
/ip firewall mangle add action=change-mss chain=forward comment="" disabled=no new-mss=1440 protocol=tcp tcp-flags=syn tcp-mss=1441-65535
/ip firewall mangle add action=jump chain=prerouting comment="" disabled=no jump-target=upload src-address-list=corp
/ip firewall mangle add action=jump chain=prerouting comment="" disabled=no jump-target=upload src-address-list=h256
/ip firewall mangle add action=jump chain=prerouting comment="" disabled=no jump-target=upload src-address-list=h128
/ip firewall mangle add action=mark-connection chain=upload comment="" disabled=no new-connection-mark=upconn_icmp passthrough=yes protocol=icmp src-address-list=corp
/ip firewall mangle add action=mark-connection chain=upload comment="" disabled=no new-connection-mark=upconn_icmp passthrough=yes protocol=icmp src-address-list=h256
/ip firewall mangle add action=mark-connection chain=upload comment="" disabled=no new-connection-mark=upconn_icmp passthrough=yes protocol=icmp src-address-list=h128
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_icmp disabled=no new-packet-mark=upstrm_icmp passthrough=no
/ip firewall mangle add action=mark-connection chain=upload comment="" disabled=no new-connection-mark=upconn_classA passthrough=yes src-address-list=corp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classA disabled=no new-packet-mark=upstrm_classA_p2p p2p=all-p2p passthrough=no
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classA disabled=no dst-port=53,5060,16567 new-packet-mark=upstrm_classA_ensign passthrough=no protocol=udp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classA disabled=no dst-port=443 new-packet-mark=upstrm_classA_ensign passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-limit=6,32 connection-mark=upconn_classA disabled=yes dst-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900 new-packet-mark=upstrm_classA_tar passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-bytes=0-1000000 connection-mark=upconn_classA disabled=no dst-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900 new-packet-mark=upstrm_classA_ensign passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-bytes=1000000-0 connection-mark=upconn_classA disabled=no dst-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900 new-packet-mark=upstrm_classA_while passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-limit=6,32 connection-mark=upconn_classA disabled=yes new-packet-mark=upstrm_classA_tar passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classA disabled=yes limit=1,5 new-packet-mark=upstrm_classA_tar passthrough=no protocol=udp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classA disabled=no new-packet-mark=upstrm_classA_foreign passthrough=no
/ip firewall mangle add action=mark-connection chain=upload comment="" disabled=no new-connection-mark=upconn_classB passthrough=yes src-address-list=h256
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classB disabled=no new-packet-mark=upstrm_classB_p2p p2p=all-p2p passthrough=no
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classB disabled=no dst-port=53,5060,16567 new-packet-mark=upstrm_classB_ensign passthrough=no protocol=udp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classB disabled=no dst-port=443 new-packet-mark=upstrm_classB_ensign passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-limit=5,32 connection-mark=upconn_classB disabled=yes dst-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900 new-packet-mark=upstrm_classB_tar passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-bytes=0-1000000 connection-mark=upconn_classB disabled=no dst-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900 new-packet-mark=upstrm_classB_ensign passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-bytes=1000000-0 connection-mark=upconn_classB disabled=no dst-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900 new-packet-mark=upstrm_classB_while passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-limit=5,32 connection-mark=upconn_classB disabled=yes new-packet-mark=upstrm_classB_tar passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classB disabled=yes limit=1,5 new-packet-mark=upstrm_classB_tar passthrough=no protocol=udp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classB disabled=no new-packet-mark=upstrm_classB_foreign passthrough=no
/ip firewall mangle add action=mark-connection chain=upload comment="" disabled=no new-connection-mark=upconn_classC passthrough=yes src-address-list=h128
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classC disabled=no new-packet-mark=upstrm_classC_p2p p2p=all-p2p passthrough=no
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classC disabled=no dst-port=53,5060,16567 new-packet-mark=upstrm_classC_ensign passthrough=no protocol=udp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classC disabled=no dst-port=443 new-packet-mark=upstrm_classC_ensign passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-limit=4,32 connection-mark=upconn_classC disabled=yes dst-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900 new-packet-mark=upstrm_classC_tar passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-bytes=0-1000000 connection-mark=upconn_classC disabled=no dst-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900 new-packet-mark=upstrm_classC_ensign passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-bytes=1000000-0 connection-mark=upconn_classC disabled=no dst-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900 new-packet-mark=upstrm_classC_while passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-limit=4,32 connection-mark=upconn_classC disabled=yes new-packet-mark=upstrm_classC_tar passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classC disabled=yes limit=1,5 new-packet-mark=upstrm_classC_tar passthrough=no protocol=udp
/ip firewall mangle add action=mark-packet chain=upload comment="" connection-mark=upconn_classC disabled=no new-packet-mark=upstrm_classC_foreign passthrough=no
/ip firewall mangle add action=return chain=upload comment="" disabled=no
/ip firewall mangle add action=jump chain=postrouting comment="" disabled=no dst-address-list=corp jump-target=download
/ip firewall mangle add action=jump chain=postrouting comment="" disabled=no dst-address-list=h256 jump-target=download
/ip firewall mangle add action=jump chain=postrouting comment="" disabled=no dst-address-list=h128 jump-target=download
/ip firewall mangle add action=mark-connection chain=download comment="" disabled=no dst-address-list=corp new-connection-mark=dnconn_icmp passthrough=yes protocol=icmp
/ip firewall mangle add action=mark-connection chain=download comment="" disabled=no dst-address-list=h256 new-connection-mark=dnconn_icmp passthrough=yes protocol=icmp
/ip firewall mangle add action=mark-connection chain=download comment="" disabled=no dst-address-list=h128 new-connection-mark=dnconn_icmp passthrough=yes protocol=icmp
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_icmp disabled=no new-packet-mark=dnstrm_icmp passthrough=no
/ip firewall mangle add action=mark-connection chain=download comment="" disabled=no dst-address-list=corp new-connection-mark=dnconn_classA passthrough=yes
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classA disabled=no new-packet-mark=dnstrm_classA_p2p p2p=all-p2p passthrough=no
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classA disabled=no new-packet-mark=dnstrm_classA_ensign passthrough=no protocol=udp src-port=53,5060,16567
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classA disabled=no new-packet-mark=dnstrm_classA_ensign passthrough=no protocol=tcp src-port=443
/ip firewall mangle add action=mark-packet chain=download comment="" connection-limit=4,32 connection-mark=dnconn_classA disabled=yes new-packet-mark=dnstrm_classA_tar passthrough=no protocol=tcp src-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900
/ip firewall mangle add action=mark-packet chain=download comment="" connection-bytes=0-1000000 connection-mark=dnconn_classA disabled=no new-packet-mark=dnstrm_classA_burst passthrough=no protocol=tcp src-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900
/ip firewall mangle add action=mark-packet chain=download comment="" connection-bytes=1000000-0 connection-mark=dnconn_classA disabled=no new-packet-mark=dnstrm_classA_aftrb passthrough=no protocol=tcp src-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900
/ip firewall mangle add action=mark-packet chain=download comment="" connection-limit=4,32 connection-mark=dnconn_classA disabled=yes new-packet-mark=dnstrm_classA_tar passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classA disabled=yes limit=1,5 new-packet-mark=dnstrm_classA_tar passthrough=no protocol=udp
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classA disabled=no new-packet-mark=dnstrm_classA_foreign passthrough=no
/ip firewall mangle add action=mark-connection chain=download comment="" disabled=no dst-address-list=h256 new-connection-mark=dnconn_classB passthrough=yes
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classB disabled=no new-packet-mark=dnstrm_classB_p2p p2p=all-p2p passthrough=no
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classB disabled=no new-packet-mark=dnstrm_classB_ensign passthrough=no protocol=udp src-port=53,5060,16567
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classB disabled=no new-packet-mark=dnstrm_classB_ensign passthrough=no protocol=tcp src-port=443
/ip firewall mangle add action=mark-packet chain=download comment="" connection-limit=4,32 connection-mark=dnconn_classB disabled=yes new-packet-mark=dnstrm_classB_tar passthrough=no protocol=tcp src-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900
/ip firewall mangle add action=mark-packet chain=download comment="" connection-bytes=0-1000000 connection-mark=dnconn_classB disabled=no new-packet-mark=dnstrm_classB_burst passthrough=no protocol=tcp src-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900
/ip firewall mangle add action=mark-packet chain=download comment="" connection-bytes=1000000-0 connection-mark=dnconn_classB disabled=no new-packet-mark=dnstrm_classB_aftrb passthrough=no protocol=tcp src-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900
/ip firewall mangle add action=mark-packet chain=download comment="" connection-limit=4,32 connection-mark=dnconn_classB disabled=yes new-packet-mark=dnstrm_classB_tar passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classB disabled=yes limit=1,5 new-packet-mark=dnstrm_classB_tar passthrough=no protocol=udp
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classB disabled=no new-packet-mark=dnstrm_classB_foreign passthrough=no
/ip firewall mangle add action=mark-connection chain=download comment="" disabled=no dst-address-list=h128 new-connection-mark=dnconn_classC passthrough=yes
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classC disabled=no new-packet-mark=dnstrm_classC_p2p p2p=all-p2p passthrough=no
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classC disabled=no new-packet-mark=dnstrm_classC_ensign passthrough=no protocol=udp src-port=53,5060,16567
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classC disabled=no new-packet-mark=dnstrm_classC_ensign passthrough=no protocol=tcp src-port=443
/ip firewall mangle add action=mark-packet chain=download comment="" connection-limit=4,32 connection-mark=dnconn_classC disabled=yes new-packet-mark=dnstrm_classC_tar passthrough=no protocol=tcp src-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900
/ip firewall mangle add action=mark-packet chain=download comment="" connection-bytes=0-1000000 connection-mark=dnconn_classC disabled=no new-packet-mark=dnstrm_classC_burst passthrough=no protocol=tcp src-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900
/ip firewall mangle add action=mark-packet chain=download comment="" connection-bytes=1000000-0 connection-mark=dnconn_classC disabled=no new-packet-mark=dnstrm_classC_aftrb passthrough=no protocol=tcp src-port=80,25,110,554,1723,1863,3389,8000,8291,5800,5900
/ip firewall mangle add action=mark-packet chain=download comment="" connection-limit=4,32 connection-mark=dnconn_classC disabled=yes new-packet-mark=dnstrm_classC_tar passthrough=no protocol=tcp
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classC disabled=yes limit=1,5 new-packet-mark=dnstrm_classC_tar passthrough=no protocol=udp
/ip firewall mangle add action=mark-packet chain=download comment="" connection-mark=dnconn_classC disabled=no new-packet-mark=dnstrm_classC_foreign passthrough=no
/ip firewall mangle add action=return chain=download comment="" disabled=no

rafa_lore · Sat Sep 13, 2008 8:07 pm

Hello
well here is the link where explain how to make QoS with PPPoE
http://wiki.mikrotik.com/wiki/Queue_wit ... _Web-Proxy
I started doing like explain its, and now I'm only work in mangle with prerouting.
If you want help tell me that I pass my email and start working
Rafael Lore

QoS with PPPoE

QoS with PPPoE

Re: QoS with PPPoE

Re: QoS with PPPoE

Re: QoS with PPPoE

Re: QoS with PPPoE

Who is online